Network Security

Hi All How can i add this commandes on two FWNG 55212 (with HA connexion) and via FMC 6.2.0: FWNG1(FTD) interface GigabitEthernet0/0 nameif Inside ip address @lan-FW1  mask vrrp xx ip @lan-FW1 vrrp xx priority 120 FWNG2(FTD) interface GigabitEthe...

Hi, I configured bookmarks to access by http to my web server on port 8000, after redirect by login it tries to go to standard 80 port, not 8000. I've many services on non standard port on that device. How to resolve issue?

Is there a way to implement pass rules in Snort 3.0 in FTD? It appears the action of pass is available in Snort 3.0 but I am not able to find any Cisco documentation on how to implement it. Creating a pass rule and then setting it to Action = Alert i...

Dears Please check below , when try to troubleshoot ftd firewall for policy and rule with follwing command , system support firewall-engine-debug. the results are coming like below. Please specify an IP protocol:Please specify a client IP address: 17...

Hello,           I need to know about ASA file Management, and all kinds of existing files on ASA and where they are installed. I need to know about each file need or signification. Thanks community

Hi!Can I reimage an Cisco Firepower 1010 with an ASA .bin image (like asa916-1-smp-k8.bin) or it would only work with an .SPA package?

Hello, I have a customer with remote offices spread around the world. We have a project where we going to exchange the ASA's with Firepower 1010's running FTD software and are managed by FMC. The peoples working in those remote offices are not techni...

Hi Everyone, Customer is enabling EDNS which uses > 512B packets.  This is then dropped by the inspection policy pasted at the bottom. What would be the best way to bypass this inspection?  1. disabling 'inspect dns' via flexconfig - that is somethin...

I would like to setup sort of a single source of truth for time on the network.  Our WatchGuard box at HQ already has pool.ntp configured on it and our servers are then getting NTP data from the WatchGuard.  I'd like to also have the ASA 5525, who is...

Hello Everyone,We are implementing the 802.1x authentification in our network and everything works quiet well with CIsco phones. The challenge we have is with NO Cisco devices . Please find below the list of devices we have in our organizatiion. Télé...

Hello.My task is to investigate IDS/IPS solutions for my enterprise.QUESTIONS:1. ASA "Firepower" technology-- can this solution be implemented with only one ASA running Firerpower, or is an additional server needed?2. This solution requires Firepower...

With Prefilter Fastpath, traffic bypasses inspection and is basically fastpathed out of the ftd device into what you may call a "toll bypass' hardware lane of some sort.With Prefilter Analyze the traffic does not bypass inspection....the question is ...